Open nntp4 opened 1 year ago
Does openssl support SM9?
Does openssl support SM9?
it doesn't. But SM9 is implemented in GmSSL https://github.com/guanzhi/GmSSL. Should we use GmSSL in eHSM? @yang8621
eHSM depends on a customized openssl: https://github.com/intel/intel-sgx-ssl/tree/support_tls. It's forked from openssl but provides two functions:
eHSM is not a libOS-based solution, so that Gmssl cannot be used directly. SM9 has values in various use cases, as you mentioned. I will also do some homework on it. But currently, there are gaps to support it.
Thanks for your reply. If I want to do this work, could you give me some advice? I'm a newbie for Intel SGX.
With pleasure. The 1st thing is to build gmssl into sgx enclave. You can refer to https://github.com/intel/linux-sgx/blob/master/SampleCode/SampleEnclave/Makefile, especially focus on the Enclave settings. Standard std files cannot be used, instead, only SGX supported headers can be used. SGX removes all syscall support inside enclave, so that you may encounter many compiling errors like get time, IO, or even printf() etc. You can either disable the unused functions, or rewrite the function by SGX SDK: send sgx ocall to the ROS.
Background
SM9 is a Chinese national cryptography standard for Identity Based Cryptography issued by the Chinese State Cryptographic Authority in March 2016(
from wikipedia
). it is also standardized in ISO 18033-5 .Use cases